In section 11 "Access Authentication", the statement
"HTTP provides several OPTIONAL challenge-response authentication
mechanisms which MAY be used by a server to challenge a client
request and by a client to provide authentication information."
is not a requirement, so the "MAY" should be changed to "may".
Ross Patterson
VM Software Division
Sterling Software, Inc.